Kiteworks security-advisories

• CVE-2026-24754 Medium 5.4 Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting 0.1%
• CVE-2026-28272 High 8.1 Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability 0.4%
• CVE-2026-28271 Medium 6.5 Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF) 0.5%
• CVE-2026-28270 Medium 4.9 Kiteworks Core has an Unrestricted Upload of File with Dangerous Type 1.8%
• CVE-2026-28269 Medium 5.9 Kiteworks Core has an OS Command Injection 2.2%
• CVE-2025-53939 Medium 6.3 Kiteworks Core is vulnerable to Improper Input Validation 0.8%
• CVE-2025-53900 Medium 6.5 Kiteworks MFT has a Privilege Defined With Unsafe Actions 1.2%
• CVE-2025-53899 High 7.2 Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel 1.0%
• CVE-2025-53897 Medium 6.8 Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2025-53896 High 7.1 Kiteworks MFT is vulnerable to Insufficient Session Expiration 0.2%